Andre Gironda@AndreGironda
CVE-2021-22005 Patches are not enough for VMWare vCenter Server and Cloud Foundation vulns -- https://www.mitiga.io/blog/patches-vmware-vcenter-server-cloud-foundation-vulns
01044344
3.8K followersView on X
CVE-2021-22005(vmware / cloud_foundation)
LOWCVSS 9.8 · CRITICALCISA KEVSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
0.0/ 10 priority
Sources & remediation
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-11-17. Apply updates per vendor instructions.
Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-22
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- cloud_foundation
- vcenter_server
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
cloud_foundationvcenter_server
3 versions affected across 2 products
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
Full discourse1 post
CPE platform detail4 entries
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vmware | cloud_foundation | - | - | - |
| App | vmware | vcenter_server | 6.5 | - | - |
| App | vmware | vcenter_server | 6.7 | - | - |
| App | vmware | vcenter_server | 7.0 | - | - |